iRAP Malaysia training course: Decade of Action for Road Safety. Report to Department of Foreign Affairs and Trade, Australia-Malaysia Institute

The International Road Assessment Program (iRAP) is a not-for-profit organisation that works in partnership with governments and non-government organisations in all parts of the world to make roads safe. The iRAP Malaysia pilot study on 3,700km of road identified the potential to save 31,800 deaths and serious injuries over the next 20 years from proven engineering improvements. To help ensure the iRAP data and results are available to planners and engineers, iRAP, together with staff from the Centre for Accident Research and Road Safety – Queensland (CARRS-Q) and the Malaysian Institute of Road Safety Research (MIROS) developed a 5-day iRAP training course that covers the background, theory and practical application of iRAP protocols, with a special focus on Malaysian case studies. Funding was provided by a competitive grant from the Australian-Malaysia Institute.

Accounting regulation for charities : international responses to IFRS adoption

This paper examines charity regulatory systems, including accounting standard setting, across five jurisdictions in varying stages of adoption of International Financial Reporting Standards, and identifies the challenges of this process. Design/methodology/approach Using a regulatory space approach, we rely on publicly available archival evidence from charity regulators and accounting standard setters in five common-law jurisdictions in advanced capitalist economies, all with vibrant charity sectors: United Kingdom, United States of America, Canada, Australia and New Zealand. Findings The study reveals the importance of co-operative interdependence and dialogue between charity regulators and accounting standard setters, indicating that jurisdictions with such inter-relationships will better manage the transition to IFRS. It also highlights the need for those jurisdictions with not-for-profit or charity-specific accounting standards to reconfigure those provisions as IFRSs are adopted. Research limitations/implications The study is limited to five jurisdictions, concentrating specifically on key charity regulators and accounting standard setters. Future research could widen the scope to other jurisdictions, or track changes in the jurisdictions longitudinally. Practical implications We provide a timely international perspective of charity regulation and accounting developments for regulators, accounting standard setters and charities, specifically of regulatory responses to IFRS adoption. Originality/value: The paper contributes fresh insights into the dynamics of charity accounting regulation in an international context by using regulatory space as an organising framework. While accounting regulation literature provides a rich interpretation of regulatory issues within the accounting arena, little attention has been paid to charity accounting regulation.

Pro Bono partnerships : community lawyering to promote environmental justice

Rural communities across Australia are increasingly being asked to shoulder the environmental and social impacts of intensive mining and gas projects. Escalating demand for coal seam gas (CSG) is raising significant environmental justice issues for rural communities. Chief amongst environmental concerns are risks of contamination or depletion of vital underground aquifers as well as treatment and disposal of high-saline water close to high quality agricultural soils. Associated infrastructure such as pipelines, electricity lines, gas processing and port facilities can also adversely affect communities and ecosystems great distances from where the gas is originally extracted. Whilst community submission (and appeal) rights do exist, accessing expert independent information is challenging, legal terminology is complex and submission periods are short, leading ultimately to a lack of procedural justice for landholders and their communities. Since August 2012, Queensland University of Technology (QUT) has worked in partnership with not-for-profit legal centre - Queensland’s Environmental Defenders Office (EDO) - to help better educate communities about mining and CSG assessment processes. The project, now entering its third semester, aims to empower communities to access relevant information and actively engage in legal processes on their own behalf. Students involved in the project so far have helped to research chapters of a comprehensive community guide to mining and CSG law as well as organising multidisciplinary community forums and preparing information on land access and compensation rights for landholders. While environmental justice issues still exist without significant law reform, the project has led to greater awareness amongst the community of the laws relating the CSG. At the same time, it has led to a greater understanding by students and academics of real life environmental justice issues currently faced by rural communities.

A concept-based retrieval method for entity-oriented search

Entity-oriented retrieval aims to return a list of relevant entities rather than documents to provide exact answers for user queries. The nature of entity-oriented retrieval requires identifying the semantic intent of user queries, i.e., understanding the semantic role of query terms and determining the semantic categories which indicate the class of target entities. Existing methods are not able to exploit the semantic intent by capturing the semantic relationship between terms in a query and in a document that contains entity related information. To improve the understanding of the semantic intent of user queries, we propose concept-based retrieval method that not only automatically identifies the semantic intent of user queries, i.e., Intent Type and Intent Modifier but introduces concepts represented by Wikipedia articles to user queries. We evaluate our proposed method on entity profile documents annotated by concepts from Wikipedia category and list structure. Empirical analysis reveals that the proposed method outperforms several state-of-the-art approaches.

Beyond normal competencies : understanding organisation designs to develop and sustain IT-related capabilities

It is apparent that IT resources are important for organisations. It is also clear that organisations unique competencies, their IT-related capabilities, leverage the IT resources uniquely to create and sustain competitive advantage. However, IT resources are dynamic, and evolve at an exponential rate. This means that organisations will need to sustain their competencies to leverage opportunities offered by new IT resources. Research on ways to sustain IT-related capabilities is limited and a deeper understanding of this situation is important. Amongst other factors, a possible reason for this lack of progress in this area could be due to the lack of validated measurement items of the theoretical constructs to conduct such studies. We suggest an environment in which organisations could build new and sustain their existing IT-related capabilities. We then report on the development of valid and reliable measures for this environment. The validated measures would be useful in extending our understanding on how firms could sustain their IT-related capabilities. This effort will provide a deeper understanding of how firms can secure sustainable IT-related business value from their acquired IT resources.

Weak key-IV pairs in the A5/1 stream cipher

A5/1 is a shift register based stream cipher which provides privacy for the GSM system. In this paper, we analyse the loading of the secret key and IV during the initialisation process of A5/1. We demonstrate the existence of weak key-IV pairs in the A5/1 cipher due to this loading process; these weak key-IV pairs may generate one, two or three registers containing all-zero values, which may lead in turn to weak keystream sequences. In the case where two or three registers contain only zeros, we describe a distinguisher which leads to a complete decryption of the affected messages.

Formalising human recognition : a fundamental building block for security proofs

A fundamental part of many authentication protocols which authenticate a party to a human involves the human recognizing or otherwise processing a message received from the party. Examples include typical implementations of Verified by Visa in which a message, previously stored by the human at a bank, is sent by the bank to the human to authenticate the bank to the human; or the expectation that humans will recognize or verify an extended validation certificate in a HTTPS context. This paper presents general definitions and building blocks for the modelling and analysis of human recognition in authentication protocols, allowing the creation of proofs for protocols which include humans. We cover both generalized trawling and human-specific targeted attacks. As examples of the range of uses of our construction, we use the model presented in this paper to prove the security of a mutual authentication login protocol and a human-assisted device pairing protocol.

Give some, get some: investigating the relationship between conspicuous donation behaviour on social media and customer value in a blood donation context

Previous research has questioned the role of altruism in charitable donation and suggests that such behaviour is also motivated by self-interest, such as public recognition or emotional satisfaction. Recognising this, not-for-profit organisations have developed strategies that allow individuals to donate conspicuously, and are at an embryonic stage of turning to social media to provide such recognition. Under investigation in this paper, is the relationship between conspicuous donation behaviour (CDB) on social media and customer value, in blood donation. Online survey results, from a sample of 186 Australian blood donors, support the proposed framework. Significant relationships between self-orientated CDB and emotional value, and other-orientated CDB and social value are demonstrated. The findings provide valuable insights into the use of conspicuous donation strategies on social media as a means to add value to the donation experience, and contribute to our understanding into the under-researched areas of CDB and customer value.

Algebraic analysis of Trivium-like ciphers

Trivium is a bit-based stream cipher in the final portfolio of the eSTREAM project. In this paper, we apply the algebraic attack approach of Berbain et al. to Trivium-like ciphers and perform new analyses on them. We demonstrate a new algebraic attack on Bivium-A. This attack requires less time and memory than previous techniques to recover Bivium-A's initial state. Though our attacks on Bivium-B, Trivium and Trivium-N are worse than exhaustive keysearch, the systems of equations which are constructed are smaller and less complex compared to previous algebraic analyses. We also answer an open question posed by Berbain et al. on the feasibility of applying their technique on Trivium-like ciphers. Factors which can affect the complexity of our attack on Trivium-like ciphers are discussed in detail. Analysis of Bivium-B and Trivium-N are omitted from this manuscript. The full paper is available on the IACR ePrint Archive.

Residential real estate education and globalisation in Australian real estate markets and practices

The purpose of this scoping paper is to offer an overview of the literature to determine the development to date in the area of residential real estate agency academic and career education in respect to Foreign Direct Investment (FDI) transactions and implications in Australia. This paper will review studies on the issue of foreign real estate ownership and FDI in Australian real estate markets to develop an understanding of the current state of knowledge on residential real estate agency practice, career education and real estate licensing requirements in Australia. The distinction between the real estate profession education, compared to other professions such as accounting, legal and finance is based on the intensity of the professional career training prior or post formal academic training. Real estate education could be carried out with relatively higher standards in terms of licensing requirement, career and academic education. As FDI in the Australian real estate market is a complex globalisation and economic phenomenon, a simple content of residential real estate training and education may not promote proper management or capacity in dealing with relevant foreign residential property market transaction. The preliminary summarising from the literature of residential real estate agency education, with its current relevant or emerging licensing requirement are focused on its role and effectiveness and impact in residential real estate market. Particular focus will be directed to the FDI relevant residential real estate agency transactions and practices, which have been strongly influenced by the current residential real estate market and agency practices. Taken together, there are many opportunities for future research to extend our understanding and improving the residential real estate agency education and training of Foreign Direct Investment in the Australian residential real estate sector.

Modelling the salient factors influencing retired business professionals' participation in episodic skilled volunteering in rural settings

Retired business professionals represent an unexplored source of skill support for struggling rural communities. This research examined the feasibility of drawing on this valuable pool of knowledge and experience by engaging retirees in short term, project based volunteering roles in rural, not for profit agencies. Using the theory of planned behaviour and the functional approach to volunteering, the program of study generated a model comprising the key psychological and contextual factors determining the volunteers' decision to provide skill assistance in rural settings. The model provides a useful resource for creating suitable volunteering opportunities and for informing volunteer recruitment strategies.

Poisoned GOOSE : exploiting the GOOSE protocol

This paper presents a vulnerability within the generic object oriented substation event (GOOSE) communication protocol. It describes an exploit of the vulnerability and proposes a number of attack variants. The attacks sends GOOSE frames containing higher status numbers to the receiving intelligent electronic device (IED). This prevents legitimate GOOSE frames from being processed and effectively causes a hijacking of the communication channel, which can be used to implement a denial–of–service (DoS) or manipulate the subscriber (unless a status number roll-over occurs). The authors refer to this attack as a poisoning of the subscriber. A number of GOOSE poisoning attacks are evaluated experimentally on a test bed and demonstrated to be successful.

Practical Modbus flooding attack and detection

The Modicon Communication Bus (Modbus) protocol is one of the most commonly used protocols in industrial control systems. Modbus was not designed to provide security. This paper confirms that the Modbus protocol is vulnerable to flooding attacks. These attacks involve injection of commands that result in disrupting the normal operation of the control system. This paper describes a set of experiments that shows that an anomaly-based change detection algorithm and signature-based Snort threshold module are capable of detecting Modbus flooding attacks. In comparing these intrusion detection techniques, we find that the signature-based detection requires a carefully selected threshold value, and that the anomaly-based change detection algorithm may have a short delay before detecting the attacks depending on the parameters used. In addition, we also generate a network traffic dataset of flooding attacks on the Modbus control system protocol.

Manifestations of preoperational reasoning on similar programming tasks

In this research paper, we study a simple programming problem that only requires knowledge of variables and assignment statements, and yet we found that some early novice programmers had difficulty solving the problem. We also present data from think aloud studies which demonstrate the nature of those difficulties. We interpret our data within a neo-Piagetian framework which describes cognitive developmental stages through which students pass as they learn to program. We describe in detail think aloud sessions with novices who reason at the neo-Piagetian preoperational level. Those students exhibit two problems. First, they focus on very small parts of the code and lose sight of the "big picture". Second, they are prone to focus on superficial aspects of the task that are not functionally central to the solution. It is not until the transition into the concrete operational stage that decentration of focus occurs, and they have the cognitive ability to reason about abstract quantities that are conserved, and are equipped to adapt skills to closely related tasks. Our results, and the neo-Piagetian framework on which they are based, suggest that changes are necessary in teaching practice to better support novices who have not reached the concrete operational stage.

Longitudinal think aloud study of a novice programmer

Recent research from within a neo-Piagetian perspective proposes that novice programmers pass through the sensorimotor and preoperational stages before being able to reason at the concrete operational stage. However, academics traditionally teach and assess introductory programming as if students commence at the concrete operational stage. In this paper, we present results from a series of think aloud sessions with a single student, known by the pseudonym “Donald”. We conducted the sessions mainly over one semester, with an additional session three semesters later. Donald first manifested predominately sensorimotor reasoning, followed by preoperational reasoning, and finally concrete operational reasoning. This longitudinal think aloud study of Donald is the first direct observational evidence of a novice programmer progressing through the neo-Piagetian stages.